Infrastructure Pentest - Extended

Fixed price. Fixed scope. No sales call. External and internal network testing for organisations that need to show their auditor both the perimeter and what an attacker could reach from inside.

Scope included

• Up to 32 external IP addresses or hostnames
• Internal network test of up to 1 subnet (/24) via VPN or a lightweight testing VM we provide
• Estimated effort: 6 tester-days

What we test

• Everything in Baseline, plus:
• Internal service exposure, network segmentation between the tested subnet and sensitive zones
• Credential attacks, lateral movement and privilege escalation paths
• Active Directory misconfigurations visible from the tested subnet

Deliverables

• PDF report with executive summary and technical findings (CVSS-scored, with remediation advice)
• 1 free retest within 45 days of the final report: we verify your fixes and issue an updated report
• Letter of attestation you can share with auditors and customers
• Critical findings reported to you immediately, not at the end of the test

Not included

• Cloud configuration review, web application logic testing
• Social engineering / phishing, denial-of-service, physical testing

If we discover during kick-off that your environment is larger than this tier, you can upgrade for the price difference or get a full refund, your choice.